CVE-2026-0209

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

Scoring

Severity

MEDIUM

CVSS base score

6.9

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS probability

0.38%

CWE

CWE-783

Published

2026-04-14

Last modified

2026-04-14

Affected products

• PureStorage FlashArray
• PureStorage FlashArray
• PureStorage FlashArray
• PureStorage FlashArray
• PureStorage FlashArray
• PureStorage FlashArray
• PureStorage FlashArray
• PureStorage FlashArray

Weakness type

• CWE-783

Related vulnerabilities

• CVE-2026-7270 — Local privilege escalation via execve()
• CVE-2026-25233 — PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
• CVE-2025-27512 — Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
• CVE-2024-20480 — A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access...
• CVE-2024-20314 — A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco...

Markdown version · Browse all CVEs